diff options
| author | Munikrishna <jmunikrishna@google.com> | 2023-01-09 10:20:04 +0000 |
|---|---|---|
| committer | Munikrishna <jmunikrishna@google.com> | 2023-01-09 10:20:04 +0000 |
| commit | 3fd0be0b78dbde07cd4e94b615401552eb366711 (patch) | |
| tree | 8fc732337797a1c844d5ca52bb6067d17ba2ee0e /tests | |
| parent | 922329a1741dd053aec0920a0a7d7fa922d2b223 (diff) | |
| download | ImsMedia-3fd0be0b78dbde07cd4e94b615401552eb366711.tar.gz | |
heap-buffer-overflow in RtcpAppPacket with hwasan enable
formAppPacketBufferOverflowTest setting invalid length to
buffer in which app packet is formed from existing packet.
Test: atest ImsMediaNativeTests
Bug: 259049177
Change-Id: I9a6d5126ea3c1ab17443b71715e40e6f0c14b514
Diffstat (limited to 'tests')
| -rw-r--r-- | tests/native/service/src/com/android/telephony/imsmedia/lib/libimsmedia/protocol/rtp/core/RtcpAppPacketTest.cpp | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/tests/native/service/src/com/android/telephony/imsmedia/lib/libimsmedia/protocol/rtp/core/RtcpAppPacketTest.cpp b/tests/native/service/src/com/android/telephony/imsmedia/lib/libimsmedia/protocol/rtp/core/RtcpAppPacketTest.cpp index 4c9ac79b..0223ec3e 100644 --- a/tests/native/service/src/com/android/telephony/imsmedia/lib/libimsmedia/protocol/rtp/core/RtcpAppPacketTest.cpp +++ b/tests/native/service/src/com/android/telephony/imsmedia/lib/libimsmedia/protocol/rtp/core/RtcpAppPacketTest.cpp @@ -113,9 +113,9 @@ TEST_F(RtcpAppPacketTest, formAppPacketBufferOverflowTest) ASSERT_TRUE(pcBuff != RTP_NULL); testBuf->setBufferInfo(RTP_DEF_MTU_SIZE, pcBuff.release()); - testBuf->setLength(RTP_DEF_MTU_SIZE); + testBuf->setLength(RTP_ZERO); - EXPECT_EQ(RTP_DEF_MTU_SIZE, testBuf->getLength()); + EXPECT_EQ(RTP_ZERO, testBuf->getLength()); RtpDt_UInt32 uiName = 11111111; testRtcpAppPacket->setName(uiName); |